Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json)
Hash identifier: N3UMlq+w9G4jZlWtzVzI505Lbnz1EWc0Ae8vFBUN5zo=
Subject key identifier: 45:72:3A:EF:C7:2F:81:9D:A2:E2:69:5B:40:A7:8B:B5:50:F6:A9:CF
Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial: 010D0C9F432858493AA3DBD4DFD91D56A5FD3010
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 401368
IP address blocks: 23.187.152.0/24 maxlen: 24
2602:f82d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:db:d4:df:d9:1d:56:a5:fd:30:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=107b3672-8b17-4b6e-a1f6-14c3cac286e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:e8:dc:dd:af:a0:a3:1f:75:a0:f7:a8:f4:
19:a1:5d:97:68:54:05:f0:63:69:c3:5f:ec:87:d0:
0f:d9:1b:62:57:17:55:1e:29:af:c3:bc:9d:e8:12:
e6:4d:ab:f0:18:85:ec:72:1b:2f:5a:51:f7:5c:d3:
5f:3b:4a:51:14:85:55:6d:7d:39:d6:b0:e6:cc:48:
c3:50:d5:be:a5:a0:e5:d7:3b:a4:8e:05:4f:b9:97:
bc:5e:5b:ff:0d:e1:71:57:98:40:ba:48:99:26:85:
2f:37:3f:e1:ea:ba:ed:52:5f:56:33:77:2f:63:f9:
9a:8a:f5:6b:96:c7:9d:b1:7e:74:30:04:50:eb:26:
11:ab:c4:0a:b9:6b:40:ef:e2:63:87:75:9a:48:01:
9f:2a:b2:12:19:37:81:f0:5b:bb:ff:61:a4:5b:ae:
ba:61:68:7e:bd:1a:a9:11:78:f5:01:ff:40:5a:25:
a0:e5:7f:96:a5:b0:b6:8f:f1:f0:ea:54:33:3a:b0:
91:51:95:80:b8:2f:59:3c:3a:a7:fe:a5:d0:ce:ec:
39:4d:4f:35:3b:d8:e8:ae:54:8f:3d:ab:01:b9:ce:
7c:94:44:e7:61:cf:2b:13:b0:8e:e4:5f:4a:63:40:
d3:e3:09:df:fc:d6:f1:28:95:3c:c9:06:7b:f5:36:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:3A:EF:C7:2F:81:9D:A2:E2:69:5B:40:A7:8B:B5:50:F6:A9:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
X509v3 Authority Key Identifier:
keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:61:b9:ca:87:10:59:79:d5:01:bd:66:70:04:98:2a:18:5f:
57:cf:b4:96:ae:28:f8:e9:9b:eb:c1:50:da:03:24:6c:c5:95:
57:34:32:99:e0:fd:d7:d5:cb:2a:2b:ae:1d:95:65:2c:ea:46:
58:04:25:12:c1:71:6f:fa:a6:8b:fe:f6:48:a0:15:7e:a3:29:
92:b2:4d:40:d9:4f:dc:7b:ac:4e:7d:30:aa:d7:62:1b:5e:a7:
ce:84:f2:1b:c4:c8:f9:3a:f8:80:75:d0:b4:78:da:57:e7:9b:
59:a2:5f:a0:8c:e0:f7:a8:3d:a6:a7:f7:5d:ce:1e:0d:1f:59:
8e:df:45:60:ab:66:4f:de:2e:74:5d:35:90:9f:6a:5d:03:ed:
ef:12:6b:5d:3e:6d:07:ff:eb:3a:a8:99:d8:80:e9:90:14:f9:
2e:11:83:e8:b1:54:69:34:b2:00:cc:b4:0b:5b:42:42:b3:4b:
cb:00:8e:b2:e7:d1:a0:06:06:40:77:b9:92:11:6f:c4:bf:0e:
ac:0f:35:87:e5:bc:ed:3f:14:17:91:ed:f7:4b:fe:8d:07:35:
94:be:cc:cb:0f:18:7b:07:46:88:29:8e:7c:b7:19:55:81:fa:
3a:ae:31:16:3a:ec:e0:be:36:91:58:46:a6:60:41:c9:f4:6f:
9c:ad:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net